Guys, I want to use Splunk for some eval work on Windows 7 prof and server 2008 and 2012. I want to stick strictly to Universal Forwarders and not WMI. Am i reading this document link correctly below?
http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorwindowsdata
The words "Splunk Enterprise must run on Windows" says to me I have no option other than a Windows install of Splunk Enterprise and therefore my currently built Splunk Enterprise Red Hat server install is not fit for this purpose?
The documentation is good but pulling these simple strings together is not easy. Can anyone point me to a document that will answer these questions please?
